Jinja2 didn't perform escaping while mako, genshi and kajiki did

TurboGears · Aug 28, 2012 · 5bff3d6 · 5bff3d6
1 parent 99e9ef5
commit 5bff3d6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/tg/configuration/app_config.py b/tg/configuration/app_config.py
@@ -479,7 +479,7 @@ def setup_jinja_renderer(self):
         loader = ChoiceLoader(
             [TemplateLoader(path) for path in self.paths['templates']])
 
-        config['pylons.app_globals'].jinja2_env = Environment(loader=loader,
+        config['pylons.app_globals'].jinja2_env = Environment(loader=loader, autoescape=True,
                  auto_reload=self.auto_reload_templates, extensions=self.jinja_extensions)
 
         # Try to load custom filters module under app_package.lib.templatetools